Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/51C9ACEE035211ED9C394C61C4F9AE02.roa
File: 51C9ACEE035211ED9C394C61C4F9AE02.roa (raw, json)
Hash identifier: cqhSyuLb0d5Lk7oE2odlRVzgmamN+wAnHK3lPimp3Pg=
Subject key identifier: 98:00:01:08:74:22:E4:CD:05:BA:A8:3C:C3:9E:4F:D9:C6:3B:8A:79
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 03D5
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/51C9ACEE035211ED9C394C61C4F9AE02.roa
Signing time: Tue 11 Oct 2022 02:32:52 +0000
ROA not before: Tue 11 Oct 2022 02:32:52 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 9833
IP address blocks: 150.107.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981 (0x3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 11 02:32:52 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6344d5d4-f841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:e1:ba:0e:39:f4:78:66:fe:ee:92:ad:0e:
fe:b6:9f:a3:a0:3d:eb:33:61:c7:2d:02:3d:94:54:
8a:5f:e4:9d:3f:21:4c:7e:5f:23:e2:ee:d2:43:b8:
de:02:51:18:99:8e:dc:db:63:a2:a4:13:2e:b7:a9:
17:0f:fb:a4:c2:a3:84:22:3b:14:71:8c:32:d3:91:
d1:37:c9:ff:14:36:88:ac:0e:52:9e:0d:af:6c:7e:
68:c4:d8:8c:69:f0:d8:c6:d3:03:90:64:19:ab:2f:
c4:ee:f5:b1:ac:a7:36:8d:a7:ce:fd:e2:53:94:6f:
0f:c6:1b:d4:74:ab:9e:39:51:25:e7:2b:5c:30:c9:
c3:4e:67:e0:be:ad:44:70:e1:7b:99:8a:ac:10:86:
b9:e6:04:6a:b6:cd:75:02:82:34:6e:04:07:cf:25:
85:da:e5:a8:3e:ff:b2:ab:38:f9:d0:68:ad:08:c2:
fa:84:ad:6d:26:f8:db:66:1b:be:f8:15:69:7d:a6:
94:41:71:e2:6d:5e:b4:70:a5:d3:a8:36:4b:f1:55:
e7:0e:e8:89:06:eb:b5:f4:ab:93:10:54:35:de:06:
38:ca:0f:dc:12:b1:50:83:b1:4c:65:e0:f5:6a:8b:
ef:4d:2b:cb:b5:56:b7:14:85:5f:d5:01:69:1d:2c:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:01:08:74:22:E4:CD:05:BA:A8:3C:C3:9E:4F:D9:C6:3B:8A:79
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/51C9ACEE035211ED9C394C61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:dd:62:f1:20:6c:bf:fd:da:d9:08:59:7a:e1:69:6b:eb:1c:
51:a7:7b:63:2f:2e:7f:7a:0b:45:59:17:21:cc:12:fb:65:cf:
9f:32:28:7f:f5:de:28:96:ca:93:3c:2e:e8:d0:59:5d:f8:2c:
8f:4a:f6:40:30:20:fa:d2:a6:ed:97:7d:04:3d:a9:fb:bd:6b:
cd:b2:9e:11:fe:4f:64:33:ef:0d:83:16:46:00:e5:ad:aa:5b:
cd:79:1d:1f:16:89:97:48:69:cb:23:84:b3:da:d6:47:72:af:
81:9a:70:11:62:b1:cf:28:b3:dd:a8:28:31:5f:96:5d:80:f4:
4d:76:65:91:32:4a:2c:ed:6f:54:62:f4:59:18:1c:71:b2:09:
7e:1e:cc:5c:12:fa:0c:4e:cc:dc:d5:40:90:d0:c6:0d:86:6c:
a1:9e:23:c7:05:0c:17:3c:17:44:c0:73:c1:ca:c6:48:24:16:
2c:8b:6d:a9:de:74:02:fc:6c:7b:fd:75:a3:07:f4:d2:15:d7:
b4:83:59:6a:42:40:e0:ca:5d:e1:c2:a1:ce:99:97:66:47:32:
68:03:4b:a3:13:67:48:2d:10:5e:35:c5:2c:ed:68:a1:1e:df:
95:11:c2:53:5d:cf:42:22:60:29:43:1c:f4:9b:a3:85:4e:f5:
5f:f2:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:34 2023 by rpki-client on console-ams.rpki-client.org